Lucene search
+L

11615 matches found

EUVD
EUVD
•added 2026/03/13 9:31 p.m.•15 views

EUVD-2026-11853

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/03/13 9:27 p.m.•14 views

CVE-2026-32720 Improper Access Control in github.com/ctfer-io/monitoring

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals i.e. logs, metrics and distributed traces. Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the...

7.1CVSS5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/13 9:27 p.m.•8 views

CVE-2026-32720 Improper Access Control in github.com/ctfer-io/monitoring

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals i.e. logs, metrics and distributed traces. Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 9:27 p.m.•49 views

CVE-2026-32720 Improper Access Control in github.com/ctfer-io/monitoring

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals i.e. logs, metrics and distributed traces. Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the...

7.1CVSS0.00421EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/13 9:27 p.m.•57 views

CVE-2026-32720

The CVE affects the github.com/ctfer-io/monitoring component. Root cause: a mis-written NetworkPolicy allowed a malicious actor to pivot from one component to another namespace, breaking security-by-default and enabling lateral movement. The vulnerability exists prior to version 0.2.1 and is addr...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 9:27 p.m.•9 views

CVE-2026-32720

The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals i.e. logs, metrics and distributed traces. Prior to 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/03/13 8:58 p.m.•22 views

github.com/ctfer-io/monitoring Vulnerable to Improper Access Control

Impact Due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. Patch Removing the inter-ns NetworkPolicy patches the...

7.1CVSS7AI score0.00421EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/03/13 8:58 p.m.•9 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to a misconfigured NetworkPolicy. An attacker can gain unauthorized access to resources in other namespaces by exploiting the overly permissive network policy configuration. Workaround This vulnerability can ...

9CVSS7AI score0.00421EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/03/13 8:58 p.m.•20 views

GHSA-7X23-J8GV-V54X github.com/ctfer-io/monitoring Vulnerable to Improper Access Control

Impact Due to a mis-written NetworkPolicy, a malicious actor can pivot from a component to any other namespace. This breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. Patch Removing the inter-ns NetworkPolicy patches the...

7.1CVSS7AI score0.00421EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/03/13 8:58 p.m.•20 views

EUVD-2026-12178

github.com/ctfer-io/monitoring Vulnerable to Improper Access Control...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/13 8:43 p.m.•12 views

CVE-2026-2491

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw...

6.3CVSS5.9AI score0.00492EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2026/03/13 7:54 p.m.•17 views

CVE-2026-32362

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.3CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 11:42 a.m.•13 views

CVE-2026-32362 WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

6AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 11:42 a.m.•46 views

CVE-2026-32362 WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.3CVSS0.00305EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/13 11:42 a.m.•21 views

CVE-2026-32362

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.8AI score0.00305EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/13 11:42 a.m.•25 views

CVE-2026-32362

CVE-2026-32362 concerns a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin “WP Sessions Time Monitoring Full Automatic” (plugin version range:

5.3CVSS6AI score0.00305EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•22 views

WordPress plugin WP Sessions Time Monitoring Full Automatic 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•22 views

PT-2026-25209

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.3CVSS5.8AI score0.00305EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•4 views

CVE-2026-32362: Missing Authorization

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.3...

5.3CVSS5.9AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•17 views

PT-2026-25399

Name of the Vulnerable Software and Affected Versions CTFer.io Monitoring versions prior to 0.2.1 Description The CTFer.io Monitoring component handles the collection, processing, and storage of signals like logs, metrics, and distributed traces. A misconfigured NetworkPolicy allows a malicious...

7.1CVSS7.1AI score0.00421EPSS
SaveExploits0
Rows per page
Query Builder